CVE

Id
38140  
CVE No.
CVE-2009-0705  
Status
Candidate  
Description
SQL injection vulnerability in news.php in PowerScripts PowerNews 2.5.4, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the newsid parameter.  
Phase
Assigned (20090223)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
414911 38140 CVE-2009-0705 MILW0RM:7641  View
414912 38140 CVE-2009-0705 URL:http://www.milw0rm.com/exploits/7641  View
414913 38140 CVE-2009-0705 BID:33081  View
414914 38140 CVE-2009-0705 URL:http://www.securityfocus.com/bid/33081  View
414915 38140 CVE-2009-0705 OSVDB:51110  View
414916 38140 CVE-2009-0705 URL:http://osvdb.org/51110  View
414917 38140 CVE-2009-0705 SECUNIA:33363  View
414918 38140 CVE-2009-0705 URL:http://secunia.com/advisories/33363  View
414919 38140 CVE-2009-0705 XF:powernews-news-sql-injection(47701)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44836 JVNDB-2009-005843 PHPFootball の login.php における SQL インジェクションの脆弱性 PHPFootball の login.php には、SQL インジェクションの脆弱性が存在します。 CVE-2009-0709 38140 7.5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005843.html  View